Bright Security

Connect Bright Security to collect vulnerability scanning evidence with automated compliance tests, switched on per workspace.

Connect with an API token

1. In Bright Security:

   1. In Bright, open the organization Settings page.
   2. Go to the API Keys tab and click + Create API key.
   3. Assign the API key a name and select the scopes projects:read and scans:read (read actions only). Optionally set an expiration date.
   4. Click Create.
   5. Copy the generated key now. As soon as you navigate away from the popup you cannot restore it.

   Bright Security shows the secret only once, so copy it before you leave the page.

   Source: docs.brightsec.com, docs.brightsec.com, docs.brightsec.com, checked 2026-10-07.

   The permissions Safeguard needs: projects:read, scans:read.

2. On Compliance › Connectors, open Bright Security, click Connect, choose API token and fill in:

   Field	What to enter
   API key	Required. Stored encrypted and never shown again.

3. Click Connect with token.

Frameworks

Safeguard's automated tests read Bright Security and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

These tests are switched on per workspace by the Safeguard team.

Related

• Vulnerability Scanning connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks